$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: Dg8TlQSJbZy3zN6nD7h1E+moiplQx5iLHrtk5Mkp1lc= Subject key identifier: 8E:13:3B:1B:1F:EA:67:FC:F0:B8:D0:D9:00:82:9E:D6:9C:01:44:52 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 12BA40033F098322A00ABC239CDFA2AC3DFF1B89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0389 Signing time: Thu 16 Apr 2026 13:30:59 +0000 Manifest this update: Thu 16 Apr 2026 13:25:59 +0000 Manifest next update: Mon 20 Apr 2026 00:37:59 +0000 Files and hashes: 1: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 3: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: 4eXH3GkRltGO0gsBKeNtpqU1llnH44zmriKUBLU5ZN4=) 4: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ba:40:03:3f:09:83:22:a0:0a:bc:23:9c:df:a2:ac:3d:ff:1b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Apr 16 13:25:59 2026 GMT Not After : Apr 20 00:37:59 2026 GMT Subject: CN=8E133B1B1FEA67FCF0B8D0D900829ED69C014452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:02:22:17:3e:94:8a:95:ea:68:9c:eb:19: 5f:43:75:5f:e3:26:b7:fe:7d:fb:7a:8b:e8:f2:39: ba:42:f2:83:62:d4:e7:b5:bd:93:03:c8:14:3c:bb: 19:70:c3:bd:55:cf:d9:6a:89:e0:e8:72:82:9c:93: 92:07:98:b6:ac:8b:2f:ed:a8:17:83:e2:6e:32:98: 26:84:c2:61:df:d5:84:ef:5a:8b:e1:36:31:e2:f3: 38:72:fc:b8:3e:0a:de:00:d4:a5:a6:d9:93:07:02: fd:b1:de:40:a1:ce:61:9c:c9:05:b1:49:39:d5:c2: 63:0d:69:22:43:12:d5:21:4a:23:89:47:71:d3:2e: 9e:5a:fb:15:86:12:83:54:a7:2e:80:b9:76:94:71: 3c:ec:ff:e1:09:e8:e6:0a:75:27:0b:38:a6:e0:6b: 89:af:70:a8:29:dd:cb:cd:8d:46:f9:53:88:94:24: a6:ee:33:a3:28:5c:c4:c7:97:f6:66:2f:e1:bf:1b: 02:0f:24:ea:4b:97:e4:1a:eb:41:36:e2:45:00:0b: cd:2f:79:ed:e9:55:e9:02:52:a9:33:60:d5:a1:a4: 3f:db:8f:50:ee:c8:b6:53:ee:35:57:11:f3:9b:b2: 12:63:40:80:97:c2:19:2f:8c:fe:04:05:76:fc:0e: 9a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:13:3B:1B:1F:EA:67:FC:F0:B8:D0:D9:00:82:9E:D6:9C:01:44:52 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:0d:c0:54:95:19:d8:03:89:7e:cb:b0:c1:d3:57:48:d9:f3: b9:07:5b:ac:2d:22:f3:7a:f0:5e:92:ec:b9:97:de:04:d4:98: 06:6b:66:5f:50:14:d0:64:89:63:40:7b:26:5f:85:91:cb:7d: 18:3b:75:9f:24:7a:44:6f:be:97:45:ab:ca:86:f0:13:ce:bd: 05:19:81:31:e8:80:6c:c4:15:84:18:64:75:8b:68:e2:ab:3f: b0:53:e8:cb:ac:f0:97:fb:9c:7a:0a:19:3f:94:38:04:30:df: 43:a9:80:2f:d6:73:87:c7:58:91:33:9d:47:cc:37:7f:cf:c5: d8:d0:ef:f3:2d:1d:4f:19:a0:a2:01:5d:86:06:b2:86:59:be: b7:0d:e3:cf:70:c3:82:b7:e1:f7:d0:93:a5:b7:11:22:1c:4c: 20:d9:43:11:d7:ea:c3:e9:27:72:50:a4:06:68:b9:42:4c:70: 24:73:e7:c8:f9:f8:aa:b5:ac:c5:a7:6b:73:c8:7c:b9:70:7e: 2d:09:71:52:c4:a9:95:b2:fa:c2:f6:df:96:99:58:34:f4:4e: 3d:21:df:4c:12:51:75:39:97:98:80:db:33:0b:14:96:96:f3: 77:84:5d:77:2b:59:db:01:e0:d9:5a:c9:a9:37:b4:64:ee:87: 39:24:93:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUErpAAz8JgyKgCrwjnN+irD3/G4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNjA0MTYxMzI1NTlaFw0yNjA0MjAwMDM3NTlaMDMxMTAvBgNV BAMTKDhFMTMzQjFCMUZFQTY3RkNGMEI4RDBEOTAwODI5RUQ2OUMwMTQ0NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCungIiFz6UipXqaJzrGV9DdV/j Jrf+fft6i+jyObpC8oNi1Oe1vZMDyBQ8uxlww71Vz9lqieDocoKck5IHmLasiy/t qBeD4m4ymCaEwmHf1YTvWovhNjHi8zhy/Lg+Ct4A1KWm2ZMHAv2x3kChzmGcyQWx STnVwmMNaSJDEtUhSiOJR3HTLp5a+xWGEoNUpy6AuXaUcTzs/+EJ6OYKdScLOKbg a4mvcKgp3cvNjUb5U4iUJKbuM6MoXMTHl/ZmL+G/GwIPJOpLl+Qa60E24kUAC80v ee3pVekCUqkzYNWhpD/bj1DuyLZT7jVXEfObshJjQICXwhkvjP4EBXb8DpoJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhM7Gx/qZ/zwuNDZAIKe1pwBRFIwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUNwFSVGdgDiX7LsMHTV0jZ87kHW6wtIvN6 8F6S7LmX3gTUmAZrZl9QFNBkiWNAeyZfhZHLfRg7dZ8kekRvvpdFq8qG8BPOvQUZ gTHogGzEFYQYZHWLaOKrP7BT6Mus8Jf7nHoKGT+UOAQw30OpgC/Wc4fHWJEznUfM N3/PxdjQ7/MtHU8ZoKIBXYYGsoZZvrcN489ww4K34ffQk6W3ESIcTCDZQxHX6sPp J3JQpAZouUJMcCRz58j5+Kq1rMWna3PIfLlwfi0JcVLEqZWy+sL235aZWDT0Tj0h 30wSUXU5l5iA2zMLFJaW83eEXXcrWdsB4Nlayak3tGTuhzkkk/0= -----END CERTIFICATE-----Generated at Sat Apr 18 03:23:19 2026 by rpki-client